Replace certain policies for isolated_app with the newly introduced
isolated_app_all for better scalability.

Bug: 265540209
Test: m
Change-Id: I1b6866d56f15089babe368bb60335c7ed99bdd6b

The new folder structure now looks like this:

  device/qcom/sepolicy_vndr
  ├─ legacy-um (meant for sdm845 until sm8350)
  ├─ sm8450
  └─ sm8550

Change-Id: I4ed1a06af779909d64172da294c4a99a3ae9ba0d

Change-Id: I0aac742db9c2b4b3e48ee20158f19405863893c2

Bug: 274964641
Test: Pre-submit tests
Change-Id: I4d9114377fe75b593bbfe6a59f03d8f5d607d6a1

Change-Id: Ic720909c803c20aaec72dae9b25ed2070b144f9d

This disables the following kernel configs:
* CONFIG_DEBUG_FS
* CONFIG_PAGE_OWNER

Change-Id: Idbf74e3dee4dccff4708462271e79374e28449ae

Starting with Android R launched devices, debugfs cannot be mounted in
production builds. In order to avoid accidental debugfs dependencies
from creeping in during development with userdebug/eng builds, the
build flag PRODUCT_SET_DEBUGFS_RESTRICTIONS can be set by vendors to
enforce additional debugfs restrictions for userdebug/eng builds. The
same flag will be used to enable sepolicy neveallow statements to
prevent new permissions added for debugfs access.

Test: build, boot
Bug: 184381659
Change-Id: I45e6f20c886d467a215c9466f3a09965ff897d7e

Change-Id: I70cc903a03ac9fa3303bb8fa039c9de4806449bf

Change-Id: I8ff8518321d6416886b24d329cecc2e47e1fbb4c

Change-Id: I688347cfe59f56e4de2e4bf3c3324ca465f7a897

Default to false if the property is not set.
Device init scripts will need to be adapted to restart
loc_launcher service when property change is detected.

Change-Id: Icbda789cd2a9a3391f437af2c07fc5127f2f09ab

Almost all warnings/errors have been fixed.
Ignore undefined bool conversion error on purpose.

Change-Id: I00cb5f38711fa9f873da030fc6a0ebc6cde3ceeb

This fixes enum-conversion warning due to implicit type enum casting
between linked_list and msg_q which happens only for status -6.

Change-Id: I27ba74c4d840b7ba0cb1017d69a30fc25b80d6b9

Change-Id: I45d621a2b995afeb7757df3f89614a0d95552f33

-Wreorder-ctor is a compile-time, Clang-only flag which is enabled by
default since Clang 12, which will warn whenever a specified field will
be initialized right after field specified below it. However, since it
doesn't sweep through all fields, compiler may miss some of them.

This order has been checked thoroughly through many trial and errors to
ensure that no such warns will be triggered anymore.

Change-Id: Id24cbb7277dc8d6c02767f8f365818ab6c017683

Change-Id: I0acef3da2c3567a28edd0a71dac89a5828f7725d

* NfcNci and SecureElement are built by handheld_system.mk

Change-Id: I83f686b67778634b584a58d8bae95d237e6dbad1

- https://git.codelinaro.org/clo/la/platform/hardware/qcom/bootctrl/-/commit/4b6405a7f0b4d52e6266683ba49c3e83c5b16e32

Change-Id: I51663ff8e074681191ac708fcd7b4d28e890deaf

Change-Id: Iee2dff5e4550239319326e4c707f89006c13ddb8

Change-Id: I1287d066eca7d1a274b491f80166ed68c5b11459

Change-Id: I60d18f2c9ab2f3b7da5c80d9a2b21236dae3d36e

Change-Id: I56af84663e44672c5f0e105be323dea7902e1c75

Change-Id: I9a0ad1bc605ea6fd40b8f0a1301129bad1c61fbd

Change-Id: I8770a65a01e622f7c541bf88cf4b70c40792a169

Change-Id: I8cbabdfd48576a1afdbf9d2c542ed82a11a4874c

Change-Id: Icb8b0619ebee908c241e90c76439895c7026adec

Change-Id: If97042228749352bc804888d8cb31ccf56742542

Looks too small on some devices

Change-Id: I0accc5fdd0ad4cb0b466e226cfc9ec4bc96a66d4

Change-Id: I8d6b915eb5037180f299f0a4b7beca84575787c5

Change-Id: Ie7ed48158db6f5f5facab5dfb2efc8560c83fe49

chaptsand authored 2 years ago and Giovanni Ricca committed 1 year ago

* Fix selinux denied of WeChat fingerprint payment

- E SELinux : avc:  denied  { find } for interface=vendor.qti.hardware.soter::ISoter sid=u:r:platform_app:s0:c512,c768 pid=3613 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:vendor_hal_soter_hwservice:s0 tclass=hwservice_manager permissive=0

Issue: https://gitlab.com/LineageOS/issues/android/-/issues/4701

Change-Id: I3176f8e709fb31aec16a31094b78f753d1d16b43

This matches LA.UM.9.14.r1-20000.01-LAHAINA.QSSI13.0

Change-Id: I27371702f040423d8c349ff5ea8d620849f3703a

This matches LA.UM.9.14.r1-19600.01-LAHAINA.QSSI12.0 and is unchanged
up to at least LA.UM.9.14.r1-21000-LAHAINA.QSSI13.0

Change-Id: I8cd347aa31102604916a149c5b956d00735592cd

Change-Id: I2c8e996fe2b7772e88c925966a6bef04f47d3661

* Drop andvanced_sf_offsets.xml as that's only used by
  libcomposerextn.qti.so which we do not include.

* Move QDCM blobs to postprocessing section

* Move libhdr_tm to a seperate section for future blob updates

Change-Id: I40dcd9d5a466ccac61ea04fbb45e0665154a0710

This was missed in commit Ib2cea88499cf08274d620d9d85ffcafc31fee868.

Change-Id: I8a130456021da1532279c3f0ac0ca0110e68b9b4

Change-Id: Iba4df5ebb5d653cb2d3f68fce9e682d946d20935

Needed after I53aad29624e904b092c3cf73d498c735cf2f1b3e

Change-Id: I245c50c6e5c5d93a58cb4fe11e8e3aef3003ae29

Change-Id: If04a525677e9e137dacb4fd759eb6d1d5d2776ba

Some camera libraries depend on it

Change-Id: I0f4638c3f383f236e813457fc88fc1c33aaa0dfc